ByteDance’s DeerFlow shipped v2.1.0 on 2026-09-24, closing the milestone with 772 merged PRs (~83k GitHub stars). Focus: trust and ops—verifiable subagent delegation, optional durable batch_task, pluggable memory (DeerMem / OpenViking / mem0 HTTP), plus E2B, BoxLite micro-VM, Tenki and OpenSandbox providers. Breakings: unconditional X-Trace-Id, reserved /mnt/skills, memory config under memory.backend_config, Docker bind defaults to 127.0.0.1.

Key Takeaways

  • ✓Shipped: v2.1.0 — 772 PRs; site deerflow.tech
  • ✓Verifiable subagent delegation + tamper-evident tool stamps; optional durable batch_task
  • ✓Pluggable memory.manager_class; FTS5/BM25; OpenViking & mem0 HTTP backends
  • ✓Sandbox: E2B replicas cap; BoxLite / Tenki / OpenSandbox among new providers
  • ✓Breakings: always-on X-Trace-Id, PAT auth, loopback Docker bind — read CHANGELOG before upgrade
🔬

In-Depth Technical Analysis

Core Background & Industry Pain Points

DeerFlow 2.0 proved the super-agent harness; production still needs auditable delegation, swappable memory, sandbox capacity control, and PAT-based API access.

Architecture Highlights & Internals

v2.1.0 closes the milestone with 772 PRs: always-on X-Trace-Id, verifiable subagent delegation, tamper-evident tool stamps, pluggable memory.manager_class, reserved /mnt/skills, E2B replica caps, and new providers (BoxLite, Tenki, OpenSandbox). PATs land under /api/v1/auth/pats. Details in the CHANGELOG.

Authoritative Benchmarks & Measured Scores

No official SWE-bench-style solve-rate table in the release notes; the headline metric is engineering throughput (772 PRs) and ~83k GitHub stars. Validate with your own delegation/sandbox/trace canaries.

Developer Hands-on Guide

Python 3.12+ / Node 22+. Read breakings before upgrade (trace header, directory storage_path, loopback bind). Docker compose remains the recommended path; demos at deerflow.tech.